At a glance
- Your journal lives on your device and in iCloud, with access for the guardians you invite.
- AI is optional. Photos and review details go directly to OpenAI only after you agree, using your own API key.
- We add no advertising or tracking SDKs. Website hosting and support email still involve ordinary service records.
- Archiving or deleting a current entry does not erase every recovery copy. The retention section explains the limits.
Who is responsible
Pup & Up is developed by Fraser Albert Barrow, the controller responsible for the personal information processed to provide this app and support service. For privacy questions or requests, email yespupup@frasor.co.uk.
This notice covers the iPhone app and this public support and quick-link website.
Your journal and iCloud
The app stores the puppy profile and records you choose to enter, including guardian names, dates, meals, treats, weight, toilet trips, sleep, training, health notes, photographs and saved review reports. It also keeps settings, record identifiers, sync information, deletion markers and recovery copies. Please avoid unnecessary information about other people in notes or photos.
The journal is stored on your device and in Apple's iCloud/CloudKit service. The household owner's records are private until shared through an invitation. Invited participants can access household information according to the permissions the owner grants, including saved photos and AI reports. Changes can take time to sync.
The app does not send your journal to a separate Pup & Up database server. A guardian name and preferences are kept on each device. The app also stores an iCloud account identifier to protect the correct account's cached journal, and identifiers and counters used to manage sync and AI requests. These are not advertising identifiers.
Optional OpenAI reviews
AI is optional. Only after you explicitly agree to a review does the app send the selected review date's photos, the nearest earlier comparison photos, puppy profile, recorded weights, food-plan information and your observations directly to OpenAI using your own API account. Photos or notes may contain personal information you included. The resulting report is saved in the household journal.
Your API key is stored in this iPhone's Keychain, configured for this device only. It is not included in iCloud sharing, exports or the journal. It is sent to OpenAI to authorise a review, not to a Pup & Up server. Remove it in More > AI photo reviews or revoke it in your OpenAI account. API usage is billed separately by OpenAI.
Requests use store:false to disable optional response storage. This is not a zero-retention guarantee. OpenAI may retain data for safety, security, legal or other purposes described in its API data controls, depending on your account settings. OpenAI says API data is not used for model training by default unless the account opts in. Read OpenAI's API data controls.
Stop future AI sharing by not starting another review or by removing your key. This does not undo an earlier request.
Photos and exports
Choosing a photo or using Camera supplies the image you select. Newly added app photos are saved as smaller JPEG copies with original location metadata removed; originals in Photos are unchanged. Imported archive attachments can preserve their existing bytes and metadata.
Reports and CSV files can contain guardian names and journal notes. Complete exports also include private photos and saved AI reports. You choose where to save or share them, and recipients control their own copies.
Retention and deletion
Journal records remain available until changed or removed, subject to iCloud and household sharing. Deleting an entry removes it from the current journal, but a deletion marker and earlier copies may remain in recovery history.
The app keeps up to 30 native journal recovery versions. Imported recovery copies, source records and restore/import audit records are retained separately and are not automatically removed by that limit. Archiving a photo hides it from the active album; it does not delete its image. Saved AI reports are retained with the household.
There is currently no single in-app action that permanently erases the whole household and every historical copy. Uninstalling the app does not by itself remove iCloud data, exported files, other people's copies or information already sent to OpenAI.
Manage sharing in More > Invite or manage people and use Apple's iCloud storage controls to manage app data. Coordinate with the household owner before removing shared data. Contact us for help understanding the available controls. See Apple's guidance on third-party app data in iCloud.
Website, support and tracking
The native app contains no advertising or analytics SDK and does not track activity across other companies' apps or websites. This website does not add analytics, advertising pixels or tracking scripts. Its NFC links contain only the destination screen, not a household or guardian identifier. Opening a link does not save a journal entry.
The website's hosting and network providers may process ordinary request information, such as IP address, browser details, requested URL and time, to deliver and secure the service. This is separate from the private iCloud journal.
If you email support, we receive your email address, message and anything you choose to attach, and our email provider processes the correspondence. We keep support correspondence for as long as needed to answer the enquiry and deal with related troubleshooting, security or legal matters. Please do not send API keys or passwords.
Why information is used
We rely on contract to process information needed to provide the journal and sharing features you request, and on consent for optional AI sharing. We rely on legitimate interests in responding to support requests, maintaining security and operating the website. Where required, information may also be kept or disclosed to meet legal obligations.
There are no advertising profiles or solely automated decisions about people with legal or similarly significant effects. Information you choose not to provide may limit the corresponding feature; AI can be left unused without preventing ordinary tracking.
Providers and international processing
Apple provides iCloud, OpenAI provides the optional API service you connect, and hosting and email providers deliver the website and support. The public website is hosted through OpenAI Sites using Cloudflare infrastructure.
These providers may process information outside the UK. Their services, account settings and privacy notices explain their locations, retention and applicable safeguards. Contact us if you need help identifying the provider or arrangement relevant to your request. We do not promise UK-only storage or zero retention.
Your choices and rights
You can edit journal information, export records, manage household sharing and stop future AI requests. Depending on the circumstances, UK data protection law gives you rights to access, correct, erase, restrict or obtain a portable copy of personal information.
You can object to processing based on legitimate interests. You can withdraw consent for optional processing without affecting earlier lawful use. Email yespupup@frasor.co.uk to make a request. We may need to verify your identity and explain which records are controlled by your iCloud household, a recipient or another provider.
You can also complain to the Information Commissioner's Office.
Changes to this notice
We will update this notice when the app's data handling changes and show the updated date here. For everyday app help, visit Pup & Up support.